Privacy Policy

1. Introduction

ReceiptMake ("we," "us," "our," or "Company") operates the receiptmake.com website (the "Service"). This Privacy Policy explains our online information practices and the choices you can make about the way your information is collected and used by us.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and password.
• Receipt Data: Information you enter into receipt templates, including business names, items, prices, and custom messages. This is stored on your device (localStorage) and optionally on our servers when you save templates.
• Payment Information: When you subscribe, payment processing is handled by Stripe. We do not store your credit card details; Stripe manages all payment information securely.
• Communication: If you contact us via email, we collect the information you provide in your message.

2.2 Automatically Collected Information

• Usage Data: We collect information about how you interact with our Service, including pages visited, time spent, and features used. This is collected via analytics tools including Google Analytics 4 and PostHog.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies: We use cookies and similar tracking technologies to track activity and remember your preferences.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving the Service
• Processing your subscription and payments
• Sending service-related announcements and updates
• Responding to your inquiries and customer support requests
• Analyzing usage patterns to improve user experience
• Complying with legal obligations
• Preventing fraud and abuse
• Marketing and promotional purposes (with your consent)

4. Data Storage and Security

• Local Storage: Receipt data is automatically saved to your browser's localStorage and syncs every 10 seconds. This data expires after 7 days.
• Server Storage: Saved templates and account data are stored in our PostgreSQL database.
• Encryption: All data transmitted to our servers is encrypted using HTTPS. Passwords are hashed and never stored in plain text.
• Security Measures: We implement industry-standard security practices, but no method of transmission over the Internet or storage is completely secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services:

• Stripe: For payment processing. See Stripe's Privacy Policy
• Google Analytics 4: For website analytics. See Google's Privacy Policy
• PostHog: For product analytics. See PostHog's Privacy Policy
• Crisp: For customer chat support. See Crisp's Privacy Policy
• Replit Auth: For authentication. See Replit's Privacy Policy

6. Tracking Technologies

Our Service uses cookies and similar technologies (pixels, web beacons) to collect information and track user activity. You can control cookie settings through your browser, but disabling cookies may limit Service functionality.

Google Analytics Tracking: We use Google Analytics to understand how users interact with ReceiptMake. This includes page views, user demographics, and behavior patterns. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.

7. Data Retention

• Receipt Data: Auto-saved receipts expire after 7 days. You can manually save templates indefinitely.
• Account Data: Your account information is retained as long as your account is active. You can request deletion by contacting us.
• Analytics Data: Our analytics partners retain data according to their respective policies (typically 12-24 months).

8. Your Rights

Depending on your location, you may have the following rights:

• Access: You can request access to your personal data
• Correction: You can request correction of inaccurate information
• Deletion: You can request deletion of your data (subject to legal retention requirements)
• Portability: You can request your data in a portable format
• Opt-out: You can opt out of marketing communications

To exercise these rights, please contact us at the email below.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for analytics and marketing cookies
• Contract: When processing is necessary to provide our Service to you
• Legitimate Interests: For fraud prevention, security, and improving our Service
• Legal Obligation: When required by applicable laws

Your GDPR Rights

• Right of Access: Obtain confirmation of whether we process your data and a copy of that data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
• Right to Lodge a Complaint: File a complaint with your local Data Protection Authority

Cookie Consent

We display a cookie consent banner allowing you to accept all cookies or only essential cookies. Essential cookies are necessary for the basic functionality of our Service. Analytics and marketing cookies are only activated with your explicit consent.

International Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data during such transfers.

To exercise your GDPR rights: Contact us at angelustrio94@gmail.com. We will respond within 30 days.

10. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes by posting the new Privacy Policy and updating the "Last Updated" date. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: angelustrio94@gmail.com